$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QRAMUjIj_-oioiPS_Qew7v4nIyY.roa File: QRAMUjIj_-oioiPS_Qew7v4nIyY.roa (raw, json) Hash identifier: e6wvhd9Gfb1b92T7q+cQIfKBGVsSVSAemI+KEiD7R3s= Subject key identifier: 41:10:0C:52:32:23:FF:EA:22:A2:23:D2:FD:07:B0:EE:FE:27:23:26 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EC0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QRAMUjIj_-oioiPS_Qew7v4nIyY.roa Signing time: Tue 10 Jun 2025 11:04:59 +0000 ROA not before: Tue 10 Jun 2025 11:04:59 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3776 (0xec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:59 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=41100C523223FFEA22A223D2FD07B0EEFE272326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:ed:a1:c7:a4:4c:cb:36:1f:62:d6:1e:f2: 16:25:c6:f2:5c:f9:d7:5d:60:59:a0:e2:ca:1b:55: 81:33:e4:70:68:1e:e4:f1:70:91:66:5a:a1:bf:b8: ef:68:d9:15:d4:ef:e4:57:cb:d3:c6:df:f6:09:aa: 8d:17:0c:a5:a2:63:5e:ce:84:b8:07:2b:ed:e7:79: 15:76:15:d7:61:2e:b0:de:b2:1f:f3:2d:5a:ac:46: a8:bc:e0:ff:2c:25:96:9d:5a:e2:62:18:b2:98:0b: db:18:32:4b:2b:b2:e2:a5:5a:dd:d1:1e:d8:1c:9b: 50:4a:b4:2d:21:5e:89:20:e3:3e:03:df:c6:f9:3f: c0:14:95:1f:d8:0f:0e:11:fa:f1:98:d6:c4:d0:75: 4d:d9:ef:9c:79:7b:56:4a:71:fb:ce:16:cc:26:fa: d3:74:c1:27:32:45:6b:3b:bd:0b:5f:f3:b1:7d:6a: ab:45:5e:ef:43:47:f7:82:97:6e:97:d6:93:0c:7e: 51:14:e2:3f:10:b0:77:d7:b5:4b:a2:91:e9:97:df: 4f:8e:52:2d:ee:dd:d4:6d:5a:9c:36:b1:e8:68:c5: 8e:1c:60:b0:4e:99:78:de:ea:9e:51:69:0e:52:0f: 65:8c:64:5e:b4:5c:e5:7a:3d:93:04:b0:c9:40:b1: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:0C:52:32:23:FF:EA:22:A2:23:D2:FD:07:B0:EE:FE:27:23:26 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QRAMUjIj_-oioiPS_Qew7v4nIyY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.248.0/21 Signature Algorithm: sha256WithRSAEncryption 48:20:32:00:c2:05:62:24:a9:7d:42:e5:58:5b:a6:d3:e8:77: b3:ed:e6:93:bb:9c:a6:2c:b9:5c:98:e5:fe:a4:f9:c0:0d:a9: 94:98:99:5f:c7:16:17:97:a7:80:3e:1b:59:b5:88:29:4a:3d: 24:db:7c:ce:a5:36:0a:90:de:ca:bb:79:3a:59:4d:cf:92:a4: c4:8c:bf:a6:5e:4b:05:f0:1c:17:be:57:3d:7e:47:0c:75:c4: 13:30:27:14:6a:15:d8:55:2c:9e:69:4c:0a:de:4c:3f:f8:86: a8:5d:0f:be:49:8d:a1:0b:2b:42:7c:c5:4a:c0:29:49:91:66: 32:e7:aa:07:54:e5:9c:0a:bc:4c:5e:a6:a1:50:5d:72:08:2f: 1b:60:f8:40:a5:30:47:94:67:ad:41:ea:06:1d:9d:9c:c9:c0: f9:b6:eb:6d:94:d5:97:ac:b4:48:26:de:48:29:85:e4:a9:92: 4a:7b:2d:cd:ea:2d:0a:1a:b0:a2:39:63:83:94:ea:fc:c6:fb: f8:94:8e:6a:ad:e3:0a:0d:bc:51:45:68:01:cc:08:d1:f1:45: eb:14:41:0a:f2:59:0d:fe:7e:f5:6b:63:29:58:47:80:aa:cf: fd:a6:d6:c7:ab:92:1c:c1:83:25:2e:87:62:d0:d2:f8:05:b3: ca:a8:ce:d7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQxMTAwQzUyMzIyM0ZG RUEyMkEyMjNEMkZEMDdCMEVFRkUyNzIzMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFO+2hx6RMyzYfYtYe8hYlxvJc+dddYFmg4sobVYEz5HBoHuTx cJFmWqG/uO9o2RXU7+RXy9PG3/YJqo0XDKWiY17OhLgHK+3neRV2FddhLrDesh/z LVqsRqi84P8sJZadWuJiGLKYC9sYMksrsuKlWt3RHtgcm1BKtC0hXokg4z4D38b5 P8AUlR/YDw4R+vGY1sTQdU3Z75x5e1ZKcfvOFswm+tN0wScyRWs7vQtf87F9aqtF Xu9DR/eCl26X1pMMflEU4j8QsHfXtUuikemX30+OUi3u3dRtWpw2sehoxY4cYLBO mXje6p5RaQ5SD2WMZF60XOV6PZMEsMlAsd0rAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQRAMUjIj/+oioiPS/Qew7v4nIyYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FSQU1VaklqXy1vaW9pUFNfUWV3N3Y0bkl5WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSvgwDQYJKoZIhvcNAQELBQADggEBAEggMgDCBWIkqX1C5VhbptPod7Pt 5pO7nKYsuVyY5f6k+cANqZSYmV/HFheXp4A+G1m1iClKPSTbfM6lNgqQ3sq7eTpZ Tc+SpMSMv6ZeSwXwHBe+Vz1+Rwx1xBMwJxRqFdhVLJ5pTAreTD/4hqhdD75JjaEL K0J8xUrAKUmRZjLnqgdU5ZwKvExepqFQXXIILxtg+EClMEeUZ61B6gYdnZzJwPm2 622U1ZestEgm3kgpheSpkkp7Lc3qLQoasKI5Y4OU6vzG+/iUjmqt4woNvFFFaAHM CNHxResUQQryWQ3+fvVrYylYR4Cqz/2m1serkhzBgyUuh2LQ0vgFs8qoztc= -----END CERTIFICATE-----Generated at Sun Jun 22 02:20:07 2025 by rpki-client